$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: UANPtcTdHKlLdHNJCEk0Dud5ZFzD1Nc2zaO1aOcgmJ8= Subject key identifier: E1:89:F0:68:65:EF:3D:7E:31:0A:90:06:D5:6C:3D:CC:12:F8:F6:27 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 032C Signing time: Tue 13 May 2025 01:45:58 +0000 Manifest this update: Tue 13 May 2025 01:45:58 +0000 Manifest next update: Tue 20 May 2025 01:45:58 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: X+W1KdOK5uR/DlkGPhUj749cjDUGqtFbHwTdAXlSbck=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: SCTf0mwZLUHqFVPegVRVJr7Eh8lVpCyL1GKCV+U6N7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: May 13 01:45:58 2025 GMT Not After : May 20 01:45:58 2025 GMT Subject: CN=6822a456-0f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:6e:04:e8:6d:58:63:f7:12:7e:95:e8:5e: d4:b7:be:03:21:36:54:6c:17:4b:6c:48:62:fb:ea: b3:13:7a:07:6f:35:40:56:1e:7c:df:6e:48:37:12: eb:aa:5d:bd:92:13:28:f2:b5:bd:db:7b:f0:07:4c: 43:05:ee:6e:5a:5b:07:12:b3:ba:36:df:e6:71:be: f9:0e:48:2f:70:0a:c3:0e:72:b7:4c:2f:fc:b6:ae: 75:24:2a:ff:62:96:1e:6b:c3:73:00:11:64:ce:f9: 00:a0:26:97:5c:a5:33:ea:48:1d:e7:6c:5c:86:e2: 87:df:fb:3d:99:b3:5a:3e:19:eb:5e:00:28:66:48: 9f:3e:57:1c:44:9e:6d:a7:6c:95:f6:aa:32:a6:f9: 50:65:91:e0:0e:03:73:1e:b4:9c:bc:12:00:27:e6: bd:25:61:41:c8:6d:79:21:a1:ec:fe:ec:6f:9b:40: 99:61:ae:18:9a:48:6f:37:4a:0f:13:45:ec:e0:99: 1e:7f:7e:89:9a:7b:b2:ac:e6:de:91:52:d6:b7:8e: a1:d6:a6:29:a3:88:4d:5b:19:11:43:cf:ae:11:55: 7b:52:8f:27:c4:ad:61:e8:dc:b4:b9:24:4e:aa:6b: 14:ee:31:30:d9:42:b4:bc:2b:33:84:24:21:ea:6f: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:89:F0:68:65:EF:3D:7E:31:0A:90:06:D5:6C:3D:CC:12:F8:F6:27 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ed:0c:99:04:47:40:77:27:57:55:82:25:76:0d:26:35:43: 68:84:a7:9c:f5:53:a0:2c:a7:cc:0a:66:a8:b4:c2:2d:aa:60: be:60:27:a1:6a:22:cb:86:e3:42:a8:c9:c3:bc:72:36:80:d2: 5d:d1:82:29:d6:16:69:7d:5b:7e:53:0d:72:37:05:ca:b8:f1: 53:22:29:9e:7e:7e:fa:a7:6b:7f:f1:a7:03:a2:dc:8f:e6:a5: f2:79:2a:fa:e3:98:de:b7:98:49:64:c0:5a:d1:3f:f6:94:fe: 78:bc:4b:a9:2b:8f:57:f1:40:60:42:a9:71:a4:97:1d:e3:03: 85:d2:d3:ab:cb:88:1c:85:fc:d2:cd:e8:fa:5e:2d:74:3b:8b: e4:bb:eb:36:c6:7b:19:ad:9b:fc:4f:75:54:98:e8:07:88:a9: 7b:d3:8f:9d:81:a5:49:50:01:43:2d:ce:b0:44:43:39:af:59: 20:ef:99:45:78:ec:40:00:ac:09:d7:d6:5d:e1:c2:19:9a:70: 61:d9:e3:e2:e2:02:ab:cb:e9:e4:42:94:63:61:ad:bf:0d:cd: 83:31:ee:47:38:c6:79:53:14:35:12:3a:40:ea:83:65:45:0f: 90:08:c0:83:22:9f:da:b0:77:03:1c:c5:5c:4d:94:8b:9f:0e: b9:f0:6c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUwNTEzMDE0NTU4WhcNMjUwNTIwMDE0NTU4WjAYMRYwFAYD VQQDEw02ODIyYTQ1Ni0wZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujxuBOhtWGP3En6V6F7Ut74DITZUbBdLbEhi++qzE3oHbzVAVh58325INxLr ql29khMo8rW923vwB0xDBe5uWlsHErO6Nt/mcb75DkgvcArDDnK3TC/8tq51JCr/ YpYea8NzABFkzvkAoCaXXKUz6kgd52xchuKH3/s9mbNaPhnrXgAoZkifPlccRJ5t p2yV9qoypvlQZZHgDgNzHrScvBIAJ+a9JWFByG15IaHs/uxvm0CZYa4YmkhvN0oP E0Xs4Jkef36JmnuyrObekVLWt46h1qYpo4hNWxkRQ8+uEVV7Uo8nxK1h6Ny0uSRO qmsU7jEw2UK0vCszhCQh6m8e8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGJ8Ghl 7z1+MQqQBtVsPcwS+PYnMB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz7QyZBEdAdydXVYIldg0mNUNohKec9VOgLKfMCmaotMItqmC+YCeh aiLLhuNCqMnDvHI2gNJd0YIp1hZpfVt+Uw1yNwXKuPFTIimefn76p2t/8acDotyP 5qXyeSr645jet5hJZMBa0T/2lP54vEupK49X8UBgQqlxpJcd4wOF0tOry4gchfzS zej6Xi10O4vku+s2xnsZrZv8T3VUmOgHiKl704+dgaVJUAFDLc6wREM5r1kg75lF eOxAAKwJ19Zd4cIZmnBh2ePi4gKry+nkQpRjYa2/Dc2DMe5HOMZ5UxQ1EjpA6oNl RQ+QCMCDIp/asHcDHMVcTZSLnw658Gzz -----END CERTIFICATE-----Generated at Wed May 14 04:53:05 2025 by rpki-client